<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.x_MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.x_MsoChpDefault
{}
@page WordSection1
{margin:70.85pt 70.85pt 70.85pt 70.85pt}
div.x_WordSection1
{}
-->
</style>
<div lang="FR" link="blue" vlink="#954F72">
<div class="x_WordSection1">
<p class="x_MsoNormal">Hello,<br>
<br>
<br>
I am running this dbus :<br>
<br>
<b>Traitement des actions différées (« triggers ») pour dbus (1.12.2-1ubuntu1) ...<br>
<br>
</b><i>Why too much older ?</i><br>
<br>
Thank you in advance to explain why I run this too much older dbus,<br>
<br>
Regards.<br>
<br>
<br>
Dorian ROSSE.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Provenance : <a href="https://go.microsoft.com/fwlink/?LinkId=550986">
Courrier</a> pour Windows 10</p>
<p class="x_MsoNormal"> </p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>De :</b> dbus <dbus-bounces@lists.freedesktop.org> de la part de Simon McVittie <smcv@collabora.com><br>
<b>Envoyé :</b> Tuesday, June 11, 2019 5:05:14 PM<br>
<b>À :</b> dbus@lists.freedesktop.org<br>
<b>Objet :</b> Announcing dbus 1.13.12</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:11pt;">
<div class="PlainText">This is a development branch for the adventurous, and comes with a risk<br>
of regressions. OS distributions should stay with the 1.12.x branch,<br>
unless they can commit to following the 1.13.x branch until it reaches<br>
a 1.14.0 stable release at an unspecified point in the future.<br>
<br>
This version incorporates the same security fix as the 1.12.16 stable<br>
release.<br>
<br>
<<a href="http://dbus.freedesktop.org/releases/dbus/dbus-1.13.12.tar.xz">http://dbus.freedesktop.org/releases/dbus/dbus-1.13.12.tar.xz</a>><br>
<<a href="http://dbus.freedesktop.org/releases/dbus/dbus-1.13.12.tar.xz.asc">http://dbus.freedesktop.org/releases/dbus/dbus-1.13.12.tar.xz.asc</a>><br>
git tag: dbus-1.13.12<br>
<br>
The “patio squirrel” release.<br>
<br>
Security fixes:<br>
<br>
• CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1<br>
authentication for identities that differ from the user running the<br>
DBusServer. Previously, a local attacker could manipulate symbolic<br>
links in their own home directory to bypass authentication and connect<br>
to a DBusServer with elevated privileges. The standard system and<br>
session dbus-daemons in their default configuration were immune to this<br>
attack because they did not allow DBUS_COOKIE_SHA1, but third-party<br>
users of DBusServer such as Upstart could be vulnerable.<br>
Thanks to Joe Vennix of Apple Information Security.<br>
(dbus#269, Simon McVittie)<br>
<br>
Enhancements:<br>
<br>
• dbus-daemon <allow> and <deny> rules can now specify a<br>
send_destination_prefix attribute, which is like a combination of<br>
send_destination and the arg0namespace keyword in match rules: a rule<br>
with send_destination_prefix="com.example.Foo" matches messages sent to<br>
any destination that is in the queue to own well-known names like<br>
com.example.Foo or com.example.Foo.A.B (but not com.example.Foobar).<br>
(dbus!85, Adrian Szyndela)<br>
<br>
-- <br>
Simon McVittie, Collabora Ltd.<br>
on behalf of the dbus maintainers<br>
_______________________________________________<br>
dbus mailing list<br>
dbus@lists.freedesktop.org<br>
<a href="https://lists.freedesktop.org/mailman/listinfo/dbus">https://lists.freedesktop.org/mailman/listinfo/dbus</a></div>
</span></font>
</body>
</html>